www.hydrosulphite.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:78:2d:59:fb:b9:84:4a:7f:b3:a0:a4:ad:3c:91:d3 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.hydrosulphite.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:78:2d:59:fb:b9:84:4a:7f:b3:a0:a4:ad:3c:91:d3
Serial Number (int): 13916275418516979607579847601734586835
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: aa:c9:94:82:3e:43:69:ac:cd:63:40:bb:4f:3d:f0:d1:91:eb:a9:3d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 2a:c0:97:20:4f:cf:ef:e9:aa:e7:44:e4:86:ba:ed:29:7d:22:a7:3d
Fingerprint (sha256): 1f:5a:bc:70:d1:75:47:6f:fb:d0:86:68:21:72:13:cc:bb:9a:15:68:ac:63:5c:13:5f:02:40:44:4d:55:9b:70

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate www.hydrosulphite.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hydrosulphite.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hydrosulphite.com
basf-ypc.com.cn
revxfields.com
partner.agro.basf.com
hydrosulphite.com
glysantin.org.cn
experience.partnerportal.basf.com
managereresource.north-america.intranet.basf.com
www.glysantin.ws
www.agrigenio.es
axant-flex.com
wrl-ltd.com
www.aroma-ingredients.basf.com
www.glysantin.sk
teraxxa-wins.com
basf-sonatrach-propanchem.com
pestcontrol-secure.basf.us
www.myindustryworld.basf.com
www.glysantin.tw
www.hydrosulfite.com

Other certificates including the domain name hydrosulphite.com

(limited to 100 certificates)
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com

Certificate

The complete raw certificate details for www.hydrosulphite.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkZyILjCetdjCNEEsBVG
Xb6KBltHkjxy2PNy4M8s4mVqv7AGRuPsCwHyg5MC5Efh9x2s5coa23Jbhd0Yag9+
2B1QaaAkejZfgKD7UiWmLOtULrHAX4vYruNY4WFLmyrNeOf6v6KnI9aYJDFpv0F2
mICttSUgNJQ60ek7goQeuYHk5mYWPrSKFHvGi2XV3Ks7WVYIEtt/c1RM/d7FYnks
e1ONSQKQwYgTaEWHmtYKfpb5mR1X6OR7faZoJQ+y7kC9DqlY3c6dNYFx1BE5lAu2
nFTEk/FWze9kZ0nUU+yNXPTOBBxd4S1NKLnGipwCJzi/6Gg1fiGq9F3xSB37ikNM
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13916275418516979607579847601734586835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hydrosulphite.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23010109628325815596767769886935238415702964250625237001909091549330333226220259069346655176082774523480672548838509237541167204665234923974373107744805187701016168352414793212210860917002995297870920771426020550564980643631146201435109583364191844042205075706956560653250635845708161855487504415554421757600456136445330525952282961362021347488519006990320450655365821975271281995198614648190578614006511149467731313670122187814756316345388716501665965252737680718840988205872624115756404894719435159506064378461158073330806599946575292480694399412103627564487912714858153496649268894223435185145727737040331423829113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aac994823e4369accd6340bb4f3df0d191eba93d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (467 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrosulphite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-ypc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revxfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.agro.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrosulphite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glysantin.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.partnerportal.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managereresource.north-america.intranet.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrigenio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axant-flex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrl-ltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aroma-ingredients.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teraxxa-wins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-sonatrach-propanchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestcontrol-secure.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myindustryworld.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrosulfite.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020def40899d56d546547d2f4db7c04a413992f6dd2b9c02ae3b88107e4b6a1bd512f452bceb47e0f58020412f9174c6c86dd42150a0114c2fdcedc20b85776234d8f0b8a7fe22db4daafb37104be55359804a140859e5af8092736ec72c969c85bc9829aa323376884c1181de5005f7ada465912caf9641e8d3d183232cea0952a283edd37627345c779ee0470b2a851375588f06fa2eaea034625e20bc00b4ea94f8956a4dd95a5aa2b509e1d8d4e4f7f7528312d6cb769dfc5fa4ed945655160e06679af1efacd302894f828a38cbe9495c185e85818bf8a019a52bf313c0f66d6e03c304144db9a8e684d3c43beea976ea4c317944bd7c900b44156329861